Security monitoring and incident response
Lead day-to-day security alert monitoring activities (EDR, SIEM, email security, M365 security, etc.).
Perform in-depth analysis and investigation of security events to distinguish false positives from real incidents.
Handle medium- to high-severity incidents (phishing, malware, account compromise, data exfiltration, etc.) and coordinate actions with IT teams and stakeholders.
Document incidents, root causes and remediation steps, and improve procedures based on lessons learned.
Provide guidance and oversee implementation of access controls (least privilege, role-based access, onboarding, transfers and offboarding).
Analyze vulnerability scan results and help prioritize remediation based on risk and criticality.
Contribute to continuous improvement of the vulnerability management program (SLAs, reporting, dashboards, etc.).
Help develop and maintain security procedures, standards and operational guides.
Requirements Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.
Typically 5+ years of experience in cybersecurity, in a Security Operations Center (SOC), incident response, or infrastructure security within an enterprise environment.
Robust understanding of the following: Networks: TCP/IP, VPN, firewalls, proxies, DNS, routing.
Operating systems: Windows Server, Windows desktops and basic knowledge of Linux.
Core services: Active Directory, Microsoft 365 (M365/O365), virtualization and basic cloud (Azure and/or AWS).




Hands-on experience with several of the following technologies: Endpoint security and EDR solutions (e.g., CrowdStrike or equivalent).
SIEM and log management (use-case creation, analysis and tuning).
Vulnerability and patch management (e.g., Tanium, Qualys).
Email and Microsoft 365 security controls, web filtering and identity security (MFA, conditional access).
Core Competencies Demonstrates expertise in security monitoring, incident response, and vulnerability management, with a strong foundation in network security and access control implementation. Proficient in analyzing security events and coordinating with IT teams to enhance security procedures and standards.
Highest-signal resume keywords Security Monitoring
Incident Response
Vulnerability Management
EDR Solutions
SIEM and Log Management
ATS Optimization Keywords Hard Skills Cybersecurity
Network Security
TCP/IP
Active Directory
Microsoft 365
Endpoint Security
Vulnerability Management
Incident Analysis
Access Control Implementation
Operating Systems
Soft Skills Analytical Thinking
Communication
Collaboration
Problem-Solving
Leadership
Industry Keywords Security Operations Center
Incident Response
Phishing
Malware
Data Exfiltration
Risk Management
Cloud Security
Operational Guides
Security Procedures
Root Cause Analysis
Tools & Technologies CrowdStrike
Tanium
Qualys
Azure
AWS
SIEM
EDR
Email Security
Web Filtering
Identity Security

#J-18808-Ljbffr

📌 Senior Cybersecurity Analyst (Quebec City)
🏢 Jobtailor
📍 Quebec City